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DETAILED ACTION 
Drawings 

Figure 1 should be designated by a legend such as -Prior Art- because only 
5 that which is old Is illustrated. See IVIPEP § 608.02(g). Corrected drawings in 
compliance with 37 CFR 1.121(d) are required in reply to the Office action to avoid 
abandonment of the application. The replacement sheet(s) should be labeled 
"Replacement Sheet" in the page header (as per 37 CFR 1 .84(c)) so as not to obstruct 
any portion of the drawing figures. If the changes are not accepted by the examiner, the 
10 applicant will be notified and informed of any required corrective action in the next Office 
action. The objection to the drawings will not be held in abeyance. 

Claim Rejections - 35 USC § 112 

Claims 1, 2, 6, 11, 13, and 15 are rejected under 35 U.S.C. 112, second 
1 5 paragraph, as being indefinite for failing to particularly point out and distinctly claim the 
subject matter which applicant regards as the invention. 

Claim 1 recites the limitation "inputted packet" in page 51 , line 26. There is 
insufficient antecedent basis for this limitation in the claim. 

Claim 2 recites the limitation "the first type packet" in line 1 , "the second type 
20 packet" in line 2, "the third type data packet" in line 4, and "the fourth type data packet" 
in line 6 of page 52. There is insufficient antecedent basis for these limitations in the 
claim. 



Application/Control Number: 10/017,392 



Page 3 



Art Unit: 2137 

Claim 6 recites tlie limitation "the first type packet" in line 25, "the second type 
packet" in line 26, "the third type data packet" in line 28, and "the fourth type data 
packet" in line 30 of page 53. There is Insufficient antecedent basis for these limitations 
in the claim. 

5 Claim 1 1 recites the limitation "the data path connection switching unit" in line 28 

of page 55. There is insufficient antecedent basis for this limitation. 

Claim 13 recites the limitation "the processing data saving unit" in line 15 of page 
56. There is insufficient antecedent basis for this limitation. 

Claim 15 recites the limitation "the data path connection switching unit" in line 1 
10 of page 57. There is insufficient antecedent basis for this limitation. 
Appropriate correction is required. 



Claim Rejections - 35 USC § 102 

The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that 
1 5 fomri the basis for the rejections under this section made in this Office action: 
A person shall be entitled to a patent unless - 

(e) the invention was described in (1) an application for patent, published under section 122(b), by 
another filed in the United States before the invention by the applicant for patent or (2) a patent 
granted on an application for patent by another filed in the United States before the invention by the 
20 applicant for patent, except that an international application filed under the treaty defined in section 

351(a) shall have the effects for purposes of this subsection of an application filed in the United States 
only if the international application designated the United States and was published under Article 21 (2) 
of such treaty in the English language. 

25 

Claims 1, 2, 5, 6, 9, 13, and 17-10 are rejected under 35 U.S.C. 102(e) as being 



anticipated by Donald P. Matthews (U.S. Patent Application Publication 2002/0078342). 
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As per claim 1, Matthews discloses a security communication packet processing 
apparatus that perfonns at least one of encryption processing, decryption processing 
and authentication processing to a packet comprising: 

one or more encryption processing unit ("cryptography engine") operable to 
5 perform the encryption processing and the decryption processing in a data block unit of 
B1 bits (Matthews [0031]); 

one or more authentication processing units ("authentication engine") operable to 
perform the authentication processing in a data block unit of B2 (= n x B1) bits in parallel 
to the encryption processing or the decryption processing by the encryption processing 
1 0 unit, and output an authentication value indicating the result of the authentication 
processing (Matthews [0029]); 

one or more data block accumulation unit ("authentication alignment block") 
operable to accumulate the data blocks to which the encryption processing is perfomied 
by the encryption processing unit, and, when the accumulated amount of the data 
15 blocks reaches 82 bits, output the data blocks to the authentication processing unit 
(Matthews [0027]); 

a packet construction unit operable to receive the encrypted or decrypted data 
blocks from the encryption processing unit, receive the authentication value from the 
authentication processing unit, and construct a packet including the received data 
20 blocks and authentication value (Matthews [0026]); and 
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a control unit operable ("cryptography alignnfient block") to divide the Inputted 
packet Into the data blocks of B1 bits, and output the data blocks sequentially to the 
encryption processing unit (Matthews [0031]). 



5 As per claim 2, Matthews discloses the security communication packet 

processing apparatus according to Claim 1, wherein the control unit judges which type 
the inputted packet is, the first type packet requiring the encryption processing and the 
authentication processing, the second type packet requiring the decryption processing 
and the authentication processing, the third type packet requiring one of the encryption 

1 0 processing and the decryption processing, or the fourth type packet requiring the 
authentication processing only (Matthews [0011] reference 'distinguishes portions of 
non-pre-padded network security protocol packet requiring one and/or another 
operation - authentication and/or encryption" to pennit single pass processing of data), 
when the packet is judged to be the first type packet, divides the packet into the 

1 5 data blocks of B1 bits and outputs the data blocks sequentially to the encryption 
processing unit (Matthews [0031]), 

when the packet is judged to be the second type packet, divides the packet into 
the data blocks of B1 bits, outputs them sequentially to the encryption processing unit 
(Matthews [0031]), divides the packet or the duplicate of the packet into the data blocks 

20 of 82 bits, and outputs the data blocks sequentially to the authentication processing unit 
(Matthews [0027]), 
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when the packet is judged to be the third type packet, divides the packet into the 
data blocks of B1 bits and outputs the data blocks sequentially to the encryption 
processing unit (Matthews [0031]), and 

when the packet is judged to be the fourth type packet, divides the packet into 
5 the data blocks of B2 bits and outputs the data blocks sequentially to the authentication 
processing unit (Matthews [0027]). 

As per claim 5, Matthews discloses the security communication packet 
processing apparatus according to Claim 1 further comprising: 

10 a data path connection switching unit ("alignment logic configuration") that can 

connect the output of the control unit and the input of the encryption processing unit, the 
output of the control unit and the input of the authentication processing unit, the output 
of the encryption processing unit and the input of the data block accumulation unit, and 
the output of the data block accumulation unit and the input of the authentication 

15 processing unit, respectively and independently (Matthews [0024]). 

As per claim 6, Matthews discloses the security communication packet 
processing apparatus according to Claim 5, 

wherein the control unit judges which type the inputted packet is. the first type 
20 packet requiring the encryption processing and the authentication processing, the 
second type packet requiring the decryption processing and the authentication 
processing, the third type packet requiring one of the encryption processing and the 



Application/Control Number: 10/017,392 Page 7 

Art Unit: 2137 

decryption processing, or the fourtli type packet requiring the authentication processing 
only (Matthews [0011] reference 'distinguishes portions of non-pre-padded network 
security protocol packet requiring one and/or another operation - authentication and/or 
encryption" to permit single pass processing of data), 
5 when the packet is judged to be the first type packet, controls the data path 

connection switching unit so as to connect the output of the control unit and the input of 
the encryption processing unit, the output of the encryption processing unit and the 
input of the data block accumulation unit, and the output of the data block accumulation 
unit and the input of the authentication unit (Matthews [0031]), 

10 when the packet is judged to be the second type packet, controls the data path 

connection switching unit so as to connect the output of the control unit and the input of 
the 1 0 encryption processing unit, and the output of the control unit and the input of the 
authentication unit (Matthews [0027]), 

when the packet is judged to be the third type packet, controls the data path 

1 5 connection switching unit so as to connect the output of the control unit and the input of 
the encryption processing unit (Matthews [0031]), 

when the packet is judged to be the fourth type packet, controls the data path 
connection switching unit so as to connect the output of the control unit and the input of 
the authentication processing unit (Matthews [0027]). 

20 

As per claim 9, Matthews discloses the security communication packet 
processing apparatus according to Claim 1 further comprising: 
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a processing data saving ("memory") unit, for each of at least one of the 
encryption processing unit, the authentication processing unit and the data block 
accumulation unit, that has a memory area for temporarily saving the data blocks which 
are being processed in the processing unit corresponding respectively to the processing 
5 unit (Matthews [0032]). 



As per claim 13, Matthews discloses the security communication packet 
processing apparatus according to Claim 1 further comprising: a processing data saving 
("memory") unit, for each of at least two of the encryption processing unit, the 
10 authentication processing unit and the data block accumulation unit, that has a memory 
area shared by the processing units for temporarily saving the data blocks which are 
being processed in the processing units (Matthews [0032]). 

As per claim 17, Matthews discloses the security communication packet 
1 5 processing apparatus according to claim 1 , 

wherein the B1 is 64 (Matthews [0027]), and 
the B2 is 512 (Matthews [0029]). 



20 



As per claim 18, Matthews discloses a security communication packet 
processing method that perfomis at least one of the encryption processing, decryption 
processing and the authentication processing to the packet including: 
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a dividing step for dividing the inputted packet into the data blocks of B1 bits 
(Matthews [0031]); 

an encryption processing step for performing the encryption processing or the 
decryption processing to the divided data blocks of B1 bits (Matthews [0031]); 
5 a data block accumulating step for accumulating the encrypted data blocks and 

outputting the data blocks when the accumulated amount of the data blocks reaches B2 
(= n X 81) bits (Matthews [0027]); 

an authentication processing step for performing the authentication processing to 
the outputted data blocks of 82 bits in parallel to the encryption processing or the 
10 decryption processing, and outputting the authentication value indicating the result of 
the authentication processing (Matthews [0029]); 

a packet constructing step for receiving the encrypted or decrypted data blocks, 
receiving the authentication value, and constructing the packet including the received 
data blocks and authentication value (Matthews [0026]). 

15 

As per claim 19, Matthews discloses the security communication packet 
processing method according to claim 18 further including: 

a control step forjudging which type the inputted packet is the first type packet 
requiring the encryption processing and the authentication processing, the second type 
20 packet requiring the decryption processing and the authentication processing, the third 
type packet requiring only one of the encryption processing and the decryption 
processing, or the fourth type packet requiring the authentication processing only, and 
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when it is judged to be the first type packet, controlling so that the division in the dividing 
step, the encryption processing in the encryption processing step, the accumulation in 
the data block accumulating step, the authentication processing in the authentication 
processing step and the construction in the packet constructing step are performed 
5 (Matthews [001 1] reference 'distinguishes portions of non-pre-padded network security 
protocol packet requiring one and/or another operation - authentication and/or 
encryption" to permit single pass processing of data). 



1 0 Claim Rejections - 35 USC § 103 

The following is a quotation of 35 U.S.C. 103(a) which fonns the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
1 5 the prior art are such that the subject matter as a whole would have been obvious at the time the 

invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

20 Claims 3, 4, 7, 8, 10-12, and 14-16 are rejected under 35 U.S.C. 103(a) as being 

unpatentable over Matthews as applied to claims 1, 2, 5, 6, 9, 13, and 17-19 above, and 
further in view of Videcrantz et al. (U.S. Patent No. 6,275,588). 

As per claim 3, Matthews discloses the security communication packet 
25 processing apparatus according to Claim 1. 
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Matthews fails to teach wherein the number of at least one of the encryption 
processing unit and the authentication unit is two or more, and the number of the data 
block accumulation unit is equal to that of the encryption processing unit. 

Videcrantz discloses a security communication packet processing apparatus 
5 including a plurality of encryption processing units and authentication processing units 
wherein the number of accumulation units is equal to that of the encryption processing 
units (see Figure 11b). 

It would have been obvious to a person of average skill in the area at the time of 
the invention to include within Matthews the plurality of units as described in Videcrantz 
10 to remove queuing delays resulting from a plurality of packets attempting to utilize the 
units at the same time. 

As per claim 4, Matthews discloses the security communication packet 

processing apparatus according to Claim 3. 
15 Matthews fails to teach wherein the control unit specifies, among two or more 

encryption processing units or two or more authentication processing units, the 

encryption processing unit or the authentication processing unit that is ready for 

processing, and outputs the data blocks to the specified encryption processing unit or 

the authentication processing unit. 
20 Videcrantz discloses a security communication packet processing apparatus 

including a plurality of processing units and authentication units wherein the control unit 

specifies which processing unit is to be utilized (see Figure lib). 
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It would have been obvious to a person of average skill in the area at the time of 
the invention to include within Matthews a control unit with the capabilities to detemnine 
which processing units have completed their calculations and are ready to output to the 
next processing unit as described in Videcrantz to in order to maintain order and 
5 expedite the time necessary to deal with incoming packets. 

As per claim 7, Matthews discloses the security communication packet 
processing apparatus according to Claim 6. 

Matthews fails to teach wherein the number of at least one of the encryption 
10 processing unit and the authentication unit is two or more, and the number of the data 
block accumulation unit is equal to that of the encryption processing unit. 

Videcrantz discloses a security communication packet processing apparatus 
including a plurality of encryption processing units and authentication processing units 
wherein the number of accumulation units is equal to that of the encryption processing 
1 5 units (see Figure lib). 

It would have been obvious to a person of average skill in the area at the time of 
the invention to include within Matthews the plurality of units as described in Videcrantz 
to remove queuing delays resulting from a plurality of packets attempting to utilize the 
units at the same time. 

20 

As per claim 8, Matthews discloses the security communication packet 
processing apparatus according to Claim 7. 
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Matthews fails to teach wherein the control unit specifies, among two or more 
encryption processing units or two or more authentication processing units, the 
encryption processing unit or the authentication processing unit that is ready for 
processing, and outputs the data blocks to the specified encryption processing unit or 
5 the authentication processing unit. 

Videcrantz discloses a security communication packet processing apparatus 
including a plurality of processing units and authentication units wherein the control unit 
specifies which processing unit is to be utilized (see Figure lib). 

It would have been obvious to a person of average skill in the area at the time of 
10 the invention to include within Matthews a control unit with the capabilities to determine 
which processing units have completed their calculations and are ready to output to the 
next processing unit as described in Videcrantz to in order to maintain order and 
expedite the time necessary to deal with incoming packets. 



15 As per claim 10, Matthews discloses the security communication packet 

processing apparatus according to claim 9, 

wherein the control unit specifies the processing unit that is performing the 

processing of the data blocks of the packet with the lowest priority among the 

processing units, and after saving the data blocks which are being processed in the 
20 processing unit into the processing data saving unit, makes the processing unit perfomi 

the processing of the data blocks of the inputted packet (Matthews [0035]). 
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As per claim 1 1 , the combined apparatus of Matthews and Videcrantz discloses 
the security communication packet processing apparatus according to Claim 10 further 
comprising: 

a data path connection switching unit that can connect the output of the control 
5 unit and the input of the encryption processing unit, the output of the control unit and the 
input of the authentication processing unit, the output of the encryption processing unit 
and the input of the data block accumulation unit, and the output of the data block 
accumulation unit and the input of the authentication processing unit, respectively and 
independently (Matthews [0024]). 

10 

As per claim 12, Matthews discloses the security communication packet 
processing apparatus according to Claim 1 1 . 

Matthews fails to teach wherein the number of at least one of the encryption 
processing unit and the authentication unit is two or more, and the number of the data 
15 block accumulation unit is equal to that of the encryption processing unit. 

Videcrantz discloses a security communication including a plurality of encryption 
processing units and authentication processing units wherein the number of 
accumulation units is equal to that of the encryption processing units (see Figure 11b). 

It would have been obvious to a person of average skill in the area at the time of 
20 the invention to include within Matthews the plurality of units as described in Videcrantz 
to remove queuing delays resulting from a plurality of packets attempting to utilize the 
units at the same time. 
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As per claim 14, IVIatthews discloses the security communication packet 
processing apparatus according to Claim 13, wherein the control unit specifies, among 
the processing units, the processing unit that is perfonning the processing of the data 
5 blocks of the packet with the lowest priority, and after saving the data blocks which are 
being processed in the processing unit in the processing data saving unit, makes the 
processing unit perform the processing of the data blocks of the inputted packet 
(Matthews [0035]). 

10 As per claim 15, the combined apparatus of Matthews and Videcrantz discloses 

the security communication packet processing apparatus according to Claim 14 further 
comprising: 

a connection switching unit that can connect control unit and the input of the 
encryption processing unit, the output of the control unit and the input of the 
15 authentication processing unit, the output of the encryption processing unit and the input 
of the data block accumulation unit, and the output of the data block accumulation unit 
and the input of the authentication processing unit, respectively and independently 
(Matthews [0024]). 

20 As per claim 16, Matthews discloses the security communication packet 

processing apparatus according to Claim 15. 
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Matthews fails to teach wherein the number of at least one of the encryption 
processing unit and the authentication unit is two or more, and the number of the data 
block accumulation unit is equal to that of the encryption processing unit. 

Videcrantz discloses a security communication packet processing apparatus 
5 including a plurality of encryption processing units and authentication processing units 
wherein the number of accumulation units is equal to that of the encryption processing 
units (see Figure lib). 

It would have been obvious to a person of average skill in the area at the time of 
the invention to include within Matthews the plurality of units as described in Videcrantz 
10 to remove queuing delays resulting from a plurality of packets attempting to utilize the 
units at the same time. 



Conclusion 

15 Any inquiry concerning this communication or earlier communications from the 

examiner should be directed to Tamara Teslovich whose telephone number is (571) 
272-4241. The examiner can nonnally be reached on Mon-Fri 8-4:30. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Andrew Caldwell can be reached on (571) 272-3868. The fax phone 

20 number for the organization where this application or proceeding is assigned is 703- 
872-9306. 
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Information regarding tlie status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
5 For more infomiation about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). 



10 



T. Teslovich 
May 5, 2005 




ANDREW CALDWELL 
SUPERVISORY RHJENT EXAMINER 



